Revisiting #1053, as this is now implemented by multiple software wallets and most hardware wallets (source: https://walletsrecovery.org). @prusnak: You mentioned you didn't want to move this to Final as you'd like to expand it with Taproot handling, but I suppose that was abandoned in favor of BIP86?
